|
Protection Poker: An Agile Security Game
Slideshow
Each time a new feature is added to a product, developers need to consider the security risk implications, find ways to securely implement the function, and develop tests to confirm that the risk is gone or significantly lowered. Laurie Williams shares a Wideband Delphi practice called Protection Poker she's employed as a collaborative, interactive, and informal agile structure for "misuse case" development and threat modeling. Laurie shares the case study results of a software development team at RedHat that used Protection Poker to identify security risks, find ways to mitigate those risks, and increase security knowledge throughout the team. In this session, Laurie leads an interactive Protection Poker exercise in which you and other participants analyze the security risk of sample new features and learn to collaboratively think like an attacker.
|
Laurie Williams, North Carolina State University
|
|
Doing Agile in a Waterfall World? Without Breaking Your Neck
Slideshow
Although many of us want to use only agile practices, we often work alongside teams with strong waterfall traditions. If you’ve had trouble finding ways for your agile ideas to co-exist peacefully with traditional lifecycles, this session is for you. Jared Richardson describes key integration points between waterfall and agile teams, and demonstrates the best ways to work together-or to perform clean hand-offs, if necessary. He shows how to use adaptive planning while still providing accurate progress status to traditional PMO counterparts. Jared reviews popular agile practices and discusses how they best function in a hybrid environment. Together, you and Jared will build a common vocabulary, examine two project models-one traditional and one agile, and then combine them in a hybrid that keeps the best of both worlds.
|
Jared Richardson, RoleModel Software
|
|
Disciplined Agile Delivery in IT: A Full Lifecycle Approach
Slideshow
The good news: Agile methods deliver superior results compared to traditional approaches. The bad news: For IT projects, mainstream agile methods-Scrum, Extreme Programming (XP), and Agile Modeling (AM)- provide only part of the overall solution. Agile IT projects require some time and effort for upfront planning at the start and activities for sophisticated deployment scenarios at the end. Additionally, most agile projects in large IT organizations cannot escape compliance with governance standards. Mark Lines describes and explores the realities of agile development in enterprise IT environments. Discover how IBM’s freely available Disciplined Agile Delivery (DAD) process framework combines common practices and strategies from mainstream agile methods to address the full delivery lifecycle-from project initiation to solution release into production.
|
Mark Lines, UPMentors
|
|
CMMI® to Agile: Options and Consequences
Slideshow
If you long for greater agility in your process-oriented or CMMI world, this session is for you. Paul McMahon shares how organizations can integrate agile approaches with CMMI and its key process area requirements. He discusses the advantages and disadvantages of different approaches taken by two organizations-one a CMMI Level 3 and the other a Level 5-to embrace agile principles and practices. To ensure your organization doesn't jeopardize its CMMI compliance with agile methods, Paul shares an approach that uses techniques such as asking key questions to focus objectives, pruning your processes, using the CMMI less formally, and keeping your "must dos" packaged separately from guidelines. He describes and discusses examples of each technique. Learn why the two organizations took different approaches, why one achieved its goals, and why the other fell short.
|
Paul McMahon, PEM Systems
|
|
Sprint Reviews that Attract, Engage, and Enlighten Stakeholders
Slideshow
Are you suffering from chronic disinterest in what your team is delivering? Are your product owners unavailable or distracted? Are your sprint reviews ho-hum experiences with low attendance? If you answered Yes to any of these questions, your agile teams are in trouble-and you need to attend this session. Experienced agile coach Bob Galen explores real-world patterns for how to increase the interest in-and the energy and value of-your sprint reviews. First, Bob explains how to prepare properly, the keys to dry runs, and the role of a Master of Ceremonies. Then he examines ways to orchestrate pro-active reviews that include the whole team and engage your audience when demonstrating "working software." Next Bob discusses how to perform a review follow-up and gather feedback for high-impact improvements. Finally, Bob wraps up by exploring ways to make sprint reviews a centerpiece of your agile adoption and transformation.
|
Bob Galen, RGalen Counsulting Group, LLC
|
|
Better Software Conference East 2012: Lean Development Practices for Enterprise Agile
Slideshow
Enterprise agile initiatives require strategic, portfolio, product, and team perspectives at all levels. Alan Shalloway has found that lean software development principles help integrate all of these perspectives into a cohesive, actionable whole. With a combination of lean science, lean management, lean team, and lean learning methods, Alan shows how your organization can prepare for enterprise agility. Lean science focuses on the “laws” present in all software development projects. Lean management empowers executives to contribute to the context within which teams can flourish. Lean team methods are actualized in Kanban approaches. Lean learning empowers everyone in the organization to improve his skills and practices.
|
Alan Shalloway, Net Objectives
|
|
Right-sized Architecture: Integrity for Emerging Designs
Slideshow
In agile projects, design ideally "emerges" over the course of development. However, if teams primarily focus on independent user stories, they risk losing sight of the product's vision and the integrity of well-thought-out architecture. Ken Kubo shares techniques he's used to improve the chances that a product's design will emerge into a cohesive and coherent architecture that serves its customers for many years. Join Ken to find out how you can incorporate contextual design principles and simple, visual techniques as part of his "A-Little-Before-Its-Time Design" framework. You can add these practices into your agile workflow to maintain a shared team understanding of your product's vision and the system's emerging design. Ken believes that you can only realize all the promises of agile development with a clearly and constantly communicated product vision and a set of architecture goals.
|
Ken Kubo, Northrop Grumman Corporation
|
|
IT Governance and Compliance in an Agile World
Slideshow
Establishing IT governance and compliance practices is essential for organizations that have regulatory or audit requirements. The good news is that you can be agile and still comply with Sarbanes-Oxley, CFR 21, HIPAA, and other regulatory imperatives. Done well, IT controls actually help you improve both productivity and quality. Bob Aiello describes how to implement IT controls in frameworks such as ISACA Cobit and ITIL v3 that many regulatory frameworks require-while maintaining agile practices. Bob's guidance includes specific examples of establishing IT controls: separation of duties, work-item to change-set traceability, physical and functional configuration audits, and more. Bob explains how these practices help government, defense, and corporations scale agile practices where audit and regulatory compliance is a must.
|
Bob Aiello, CM Best Practices Consulting
|
|
Ready and Fit: Adopting Agile in Highly Regulated Environments
Slideshow
If you live and work in a highly regulated environment (HRE)-medical devices, DoD and its contractors, nuclear energy, or other life-critical systems-this session is for you. For the past three years, the SEI has been researching agile and lean adoptions in the US Department of Defense. Suzanne Miller presents the organizational and cultural factors they identified as most important for development organizations to demonstrate when embarking on an agile adoption program. In the SEI's technology transition research, Suzanne and her team found that the more closely an organization meets the readiness and fit criteria, the more likely it is that the adoption will succeed. Suzanne discusses the risks and challenges that agile adoption presents to HREs, and presents ways to mitigate risks and overcome challenges.
|
Suzanne Miller, Software Engineering Institute
|
|
Pay Now or Pay More Every Day: Reduce Technical Debt Now!
Slideshow
Is your team missing delivery dates? Is your velocity inconsistent from sprint to sprint? Are customers complaining about defects or the time it takes to add new features? These are signs that you are mired in technical debt-a metaphor that describes the long-term costs of doing something in a quick and dirty way and not going back to clean up the mess. Fadi Stephan shares a technical debt management approach to help you make prudent decisions on how much effort to invest in reducing technical debt. Discover ways to measure the quality of your current code base and determine the cost of eventual rework hanging over your system. Learn how to engage executives and get buy-in on a debt removal plan that will improve system design, increase the quality of your code, and return your team to high productivity. If you are burdened with technical debt, the choice is to pay now or continue paying more every day-forever.
|
Fadi Stephan, Excella Consulting
|